Rachel Ecclestone ACSAC 2001 review. 47-60 2002 21 Computers & Security 1 db/journals/compsec/compsec21.html#Ecclestone02a